Cloud security engineer

Encord; Greater London; On-site; GBP 120,000 - 180,000; Full time

Benefits offered by this job

London-office culture

Learning & development budget

Annual leave + public holidays

Equity opportunity

Job summary

Encord ищет инженера по облачной безопасности для усиления инфраструктуры и защиты чувствительных данных клиентов. Роль включает работу с сегментами облака, настройку IAM/VPC, реализацию нулевого доверия и интеграцию IaC-процессов. Офис в Лондоне, гибридная/офисная работа и конкурентный пакет вознаграждений.

Требуется 5+ лет опыта в области безопасности платформ и SaaS, глубокие знания GCP и опыт в аудите и соответствующих программах. Участие в обучении и развитии сотрудников приветствуется.

Qualifications

• 5+ лет опыта в облачной платформенной безопасности в SaaS-компаниях с быстрым ростом.
• Экспертиза в GCP: IAM, VPC, сетевые периметрии, политики на уровне организации.
• Опыт работы с CI/CD, IaC (Terraform) и безопасными воротами на масштабе продукта.
• Знание принципов нулевого доверия и безопасной передачи трафика между сервисами.
• Опыт аудита и соответствия ISO 27001, SOC 2 и аналогичным программам.

Responsibilities

• Развивать инфраструктуру для защиты от новых угроз и атак.
• Достижение целей комплаенса и прохождение аудитов.
• Владение задачей от идеи до продакшна, работа в условиях неопределенности.
• Автоматизация рутинных процессов и улучшение обратной связи.
• Проектирование надежной инфраструктуры и безопасного кода.

Skills

Cloud Security

GCP IAM & VPC

Zero-trust Networking

CI/CD & IaC

Terraform

Security Audits & Compliance

Tools

Terraform

KMS

Logging/Monitoring

Job description

Описание

Encord is the universal data layer for AI that helps 300+ AI teams train and run models on the right data. Our platform indexes, curates, annotates, and evaluates data across the full AI lifecycle, from development through production. The Role Encord handles sensitive, high-value data for our customers, including in regulated industries like healthcare. In an era where exploits and supply-chain attacks are being discovered and executed faster than ever, it's vital that we stay on the cutting edge of keeping our systems and our customers\' data safe.

Задачи

• As we scale, you\'ll help evolve our infrastructure to defend against new threats and keep us one step ahead.
• Delivering on our compliance goals and successfully handling audits.
• You own problems end-to-end, from brainstorming through to production, and you thrive in ambiguity.
• You automate toil, improve feedback loops, and care deeply about making other people productive.
• You iterate quickly, ship pragmatically, and automate everything.

Требования

• We\'re hiring at both Level 3 (Senior) and Level 4 (Staff). For calibration, candidates typically bring 5+ years of platform engineering experience in high-growth, cloud-native SaaS environments, but we care more about impact than years.
• We\'re looking for that "T"-shaped skillset where the candidate\'s depth is in Cloud Security. The ideal candidate will have a product, infrastructure or network engineering background but caught the bug for security, and cares deeply about enabling people to work fast, safely.
• Cloud security specialist. Deep knowledge of GCP: IAM, VPC and networking, firewall and perimeter controls, KMS, secrets management, logging/monitoring, and org-level policy.
• You understand cloud-native architectures and their trade-offs.
• Network security depth.
• You understand network segmentation, private connectivity, zero-trust patterns, TLS/mTLS, and how to secure traffic between services and to the outside world.
• Platform engineer & builder. You design reliable infrastructure and write clean production code.
• You\'ve built and maintained CI/CD pipelines, IaC (Terraform), and security gates at scale.
• Security as an enabler. You treat engineers and the business as your customers.
• Commercially minded.
• You understand that infrastructure and security exist to serve the product and the business, and you make trade-offs with that in mind.
• Bias for action. You iterate quickly, ship pragmatically, and automate everything.
• Будет плюсом: Experience securing other cloud providers (AWS, Azure) or on-premise / hybrid environments, so we can meet our customers wherever they run; ISC2 (any level) or relevant cloud security certification (e.g. GCP Professional Cloud Security Engineer); Experience with SaaS compliance programs (ISO 27001, SOC 2 Type II, HIPAA); Open-source contributions to security, infrastructure, or developer-tooling projects

Условия

• Competitive salary, commission, and meaningful equity in a high-growth startup
• Strong in-person culture: most of the team works from our London office 4+ days/week
• 25 days annual leave + UK public holidays
• Annual learning & development budget
• Travel for customer visits, events, and conferences across the UK and Europe
• Daily company lunches
• Monthly socials & bi-annual team offsites